vibe-debug
Pass
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: SAFEDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [DYNAMIC_EXECUTION]: The skill is designed to generate and execute various diagnostic scripts (Python, Node.js, Bash) to create reproduction harnesses and feedback loops for debugging purposes.
- [INDIRECT_PROMPT_INJECTION]: The skill processes potentially untrusted external diagnostic data, such as system logs, HAR files, and network traces, which could contain malicious instructions designed to influence agent behavior.
- Ingestion points: Diagnostic materials, log files, network traces, and HAR files are read during Phase 1 and Phase 2 in SKILL.md.
- Boundary markers: The skill instructs the agent to use placeholders and recommends isolated directory structures (.agents/prototype/) for temporary artifacts.
- Capability inventory: The skill can execute shell commands, run generated scripts, and perform network operations using curl.
- Sanitization: Manual redaction of sensitive information is required by the user before sharing diagnostic data with the agent, as highlighted in both SKILL.md and the HITL script.
- [COMMAND_EXECUTION]: The skill utilizes a variety of CLI tools and commands, including curl, git bisect, and automated test runners, to verify bug symptoms and validate fixes.
Audit Metadata